2026-08-25 15:05:00
(1 week ago)
Fraud VoIP
🇯🇵
Kinsei Engineering Inc.
2025-06-28 22:47:47
(1 year ago)
2025/06/29 07:47:41 [error] 513335#513335: *46833 access forbidden by rule, client: 185.241.208.30, ...
show more
2025/06/29 07:47:41 [error] 513335#513335: *46833 access forbidden by rule, client: 185.241.208.30, server: www.kinsei.jp, request: "GET /.env HTTP/2.0", host: "www.kinsei.jp"
2025/06/29 07:47:43 [error] 513336#513336: *46835 access forbidden by rule, client: 185.241.208.30, server: www.kinsei.jp, request: "GET /.env HTTP/2.0", host: "www.kinsei.jp"
2025/06/29 07:47:46 [error] 513336#513336: *46837 access forbidden by rule, client: 185.241.208.30, server: www.kinsei.jp, request: "GET /kinsei.jp/.env HTTP/2.0", host: "www.kinsei.jp"
show less
Web Spam
Brute-Force
🇩🇪
DEV-DNS
2025-06-28 19:52:32
(1 year ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇯🇵
VXG-NET
2025-06-28 18:50:17
(1 year ago)
port=80, indicator_type=info-leak
Hacking
🇺🇸
TPI-Abuse
2025-06-28 16:36:58
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 185.241.208.30 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 185.241.208.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 28 12:36:54.440395 2025] [security2:error] [pid 3305306:tid 3305306] [client 185.241.208.30:58621] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aquascapes.net"] [uri "/.env"] [unique_id "aGAaJpo1XVBcJkCPrYzyWQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2025-06-28 16:21:02
(1 year ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2025-06-28 16:01:26
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 185.241.208.30 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 185.241.208.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 28 12:01:18.449038 2025] [security2:error] [pid 4040714:tid 4040714] [client 185.241.208.30:52558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "esmital.cl"] [uri "/.env"] [unique_id "aGARzuq0iCfKI7nfytxqgQAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-28 14:19:43
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 185.241.208.30 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 185.241.208.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 28 10:19:37.335597 2025] [security2:error] [pid 2593404:tid 2593418] [client 185.241.208.30:62973] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.siriuspharmaceuticals.com"] [uri "/.env"] [unique_id "aF_5-b5OhnBzgQYFai8R4gAAAMw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2025-06-28 12:42:28
(1 year ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2025-06-28 12:32:33
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 185.241.208.30 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 185.241.208.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 28 08:32:26.593554 2025] [security2:error] [pid 4129634:tid 4129634] [client 185.241.208.30:63951] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "asiancommoditiescorporation.com"] [uri "/.env"] [unique_id "aF_g2n4f1aFFhzbVmNyVEAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇹
penguin-solutions.at
2025-06-28 12:22:38
(1 year ago)
Excessive 403/404 errors
...
Brute-Force
Web App Attack
🇲🇾
Rizzy
2025-06-28 10:04:48
(1 year ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇩🇪
noxtec GmbH
2025-06-28 00:49:35
(1 year ago)
(mod_security) mod_security triggered on hostname [redacted] 185.241.208.30 (PL/Poland/-)
SQL Injection
🇳🇱
Savvii
2025-06-27 23:51:15
(1 year ago)
20 attempts against mh_ha-misbehave-ban on hydra
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2025-06-27 23:45:28
(1 year ago)
Login credentials theft attempt
Hacking
